oss-sec mailing list archives

Re: Re: More Ghostscript Issues: Should we disable PS coders in policy.xml by default?


From: Bob Friesenhahn <bfriesen () simple dallas tx us>
Date: Wed, 22 Aug 2018 16:16:34 -0500 (CDT)

The CERT advisory at https://www.kb.cert.org/vuls/id/332928 provides a policy.xml example which does not appear to block PS2 and PS3, which are also entry points for reading Postscript.

Bob
--
Bob Friesenhahn
bfriesen () simple dallas tx us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/


Current thread: